Detections
Analytics

BASE < 1.4.4 Multiple Vulnerabilities

high Nessus Network Monitor Plugin ID 5211

Synopsis

The remote host is running a PHP application that is vulnerable to multiple attack vectors.

Description

The remote host is running BASE, a web-based tool for analyzing alerts from one or more SNORT sensors. The version of BASE installed on the remote host is earlier than 1.4.4. Such versions are potentially affected by multiple issues :

- A SQL-injection flaw.

 - A cross-site scripting vulnerability in 'base_local_rules.php'.

 - A local file include vulnerability in 'base_local_rules.php'.

Solution

Upgrade to BASE version 1.4.4 or later.

See Also

http://www.nessus.org/u?86a77f0c

http://base.secureideas.net/news.php

Plugin Details

Severity: High

ID: 5211

Family: CGI

Published: 10/27/2009

Updated: 3/6/2019

Nessus ID: 42264

Vulnerability Information

Patch Publication Date: 5/28/2009

Vulnerability Publication Date: 10/27/2009

Reference Information

BID: 36830